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A SYSTEM, METHOD AND ARTICLE OF MANUFACTURE FOR 
NETWORK ELECTRONIC AUTHORIZATION UTILIZING AN 
AUTHORIZATION INSTRUMENT 



5 Field Of The Invention 

The present invention relates to the electronic payment or other 
authorization for access to goods and services purchased over a 
communication network, and more specifically, it relates to an 
ergonomic, graphical user network interface which simulates a real 
1 0 life transaction for the credit card, cash or other payment of goods. 

Background of the Invention 

The present invention relates to an electronic graphical representation 
of a monetary system for implementing electronic money payments as 
15 an alternative medium of economic exchange to cash, checks, credit 
and debit cards, and electronic funds transfer. The Electronic- 
Monetary System is a hybrid of currency, check, card payment 
systems, and electronic funds transfer systems, possessing many of 
the benefits of these systems with few of their limitations. The system 
20 utilizes electronic representations of money which are designed to be 
universally accepted and exchanged as economic value by subscribers 
of the monetary system. 

Today, approximately 350 billion coin and currency transactions 
25 occur between individuals and institutions every year. The extensive 
use of coin and currency transactions has limited the automation of 
individual transactions such as purchases, fares, and bank account 
deposits and withdrawals. Individual cash transactions are burdened 
by the need to have the correct amount of cash or providing change 
30 therefor. Furthermore, the handling and managing of paper cash and 
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coins is inconvenient, costly and time consuming for both individuals 
and financial institutions. 

Although checks may be written for any specific amount up to the 
5 amount available in the account, checks have very limited 

transferability and must be supplied from a physical inventory. 
Paper-based checking systems do not offer sufficient relief from the 
limitations of cash transactions, sharing many of the inconveniences 
of handling currency while adding the inherent delays associated with 
10 processing checks. To this end, economic exchange has striven for 
greater convenience at a lower cost, while also seeking improved 
security. 

Automation has achieved some of these qualities for large transactions 
15 through computerized electronic funds transfer ("EFT*) systems. 
Electronic funds transfer is essentially a process of value exchange 
achieved through the banking system's centralized computer 
transactions. EFT services are a transfer of payments utilizing 
electronic "checks," which are used primarily by large commercial 
20 organizations. 

The Automated Clearing House (ACH) where a user can enter a pre- 
authorized code and download information with billing occurring later, 
and a Point Of Sale (POS) system where a transaction is processed by 

25 connecting with a central computer for authorization for the 
t action granted or denied immediately are examples of EFT 
s^ :ms that are utilized by retail and commercial organizations. 
However, the payments made through these types of EFT systems are 
limited in that they cannot be performed without the banking system. 

30 Moreover, ACH transactions usually cannot be performed during off 
business hours. 
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Home Banking bill payment services are examples of an EFT system 
used by individuals to make payments from a home computer. 
Currently, home banking initiatives have found few customers. Of the 
5 banks that have offered services for payments, account transfers and 
information over the telephone lines using personal computers, less 
than one percent of the bank's customers are using the service. One 
reason that Home Banking has not been a successful product is 
because the customer cannot deposit and withdraw money as needed 
10 in this type of system. 

Current EFT systems, credit cards, or debit cards, which are used in 
conjunction with an on-line system to transfer money between 
accounts, such as between the account of a merchant and that of a 
15 customer, cannot satisfy the need for an automated transaction 

system providing an ergonomic interface. Examples of EFT systems 
which provide non-ergonomic interfaces are disclosed in US Patents 
Numbers 5,476,259; 5,459,304; 5,452,352; 5,448,045; 5,478,993; 
5,455,407; 5,453,601; 5,465,291; and 5,485,510. 

20 

To implement an automated, convenient transaction that can 
dispense some form of economic value, there has been a trend 
towards off-line payments. For example, numerous ideas have been 
proposed for some form of "electronic money" that can be used in 
25 cashless payment transactions as alternatives to the traditional 
currency and check types of payment systems. See U.S. Pat. No. 
4,977,595, entitled "METHOD AND APPARATUS FOR IMPLEMENTING 
ELECTRONIC CASH," and U.S. Pat. No. 4,305,059, entitled 
"MODULAR FUNDS TRANSFER SYSTEM 



30 
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The more well known techniques include magnetic stripe cards 
purchased for a given amount and from which a prepaid value can be 
deducted for specific purposes. Upon exhaustion of the economic 
value, the cards are thrown away. Other examples include memory 
5 cards or so called smart cards which are capable of repetitively storing 
information representing value that is likewise deducted for specific 
purposes. 

While the art pertaining to cash alternatives for transactions is a well 
10 developed one, there is a substantial need for a more user friendly 
sstem and method for such transactions. Thus, there is a need for a 
system that allows a user to interface with a display that looks and 
feels natural. Of particular importance is the ease of acceptance 
resulting from the similarity to accepted norms of payment. 

15 

SUMMARY OF AN EXEMPLARY EMBODIMENT 

In accordance with these and other objects of the invention, a brief 
summary of the present invention is presented. Some simplifications 
and omissions may be made in the following summary, which is 
20 intended to highlight and introduce some aspects of the present 
invention, but not to limit its scope. Detailed descriptions of a 
preferred, exemplary embodiment adequate to allow one of ordinary 
skill in the art to make and use the inventive concepts will follow in 
later sections. 

25 

According to a broad aspect of the invention, an electronic monetary 
system provides for transactions utilizing a preferred embodiment in 
the form of an electronic-monetary system that emulates a wallet, a 
purse, a smart card, a pocketbook, a checkbook, a satchel or other 
30 payment instrument holder that is customarily used for storing 

money, credit cards and other payment instruments. Access to the 
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wallet is restricted by a password, which can be encrypted, or used to 
generate an encryption key for restricting access to sensitive 
information, to avoid unauthorized payments. When access is 
authorized, a graphical representation (bitmap) of the instrument(s) is 
5 presented on the display based on either a user default, an 

instrument issuer default or payment instrument holder default. to 
enable a user to select a payment instrument for use in a particular 
transaction. Once a payment instrument is selected, a summary of 
the goods for purchase are presented to the user and the user enters 
1 0 their electronic approval for the transaction or cancels the 

transaction. Electronic approval results in the generation of an 
electronic transaction to complete the order. 
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Bri f Descripti n of the Drawings 

The foregoing and other objects, aspects and advantages are 
better understood from the following detailed description of a 
preferred embodiment of the invention with reference to the drawings, 
5 in which: 

Figure 1A is a block diagram of a representative hardware 
environment in accordance with a preferred embodiment; 

10 Figure IB is a block diagram of the system in accordance with a 
preferred embodiment; 



Figure 2 provides an alternative preferred embodiment in accordance 
with a Java based implementation of the invention; 

15 

Figure 3 is an architecture block diagram in accordance with a 
preferred embodiment of the subject invention; 

Figure 4 presents the detailed logic associated with the payment 
20 manager in accordance with a preferred embodiment; 

Figure 5 is a Consumer Payment Message Sequence Diagram in 
accordance with a preferred embodiment of the invention; 

25 Figure 6 is a flowchart setting forth the detailed logic of a paywindow 
user interface in accordance with a preferred embodiment of the 
invention; 

Figure 7 is a flowchart of the detailed logic associated with the 
30 administration mode of the paywindow in accordance with a preferred 
embodiment; 
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Figure 8 is a flowchart of administration mode processing associated 
with register and report processing in accordance with a preferred 
embodiment; 

5 

Figure 9 is an illustration of a paywindow display in accordance with 
a preferred embodiment; 

Figure 10 illustrates a list of payment methods for a user to select 
10 from in accordance with a preferred embodiment; 

Figure 11 is an authorization display screen in accordance with a 
preferred embodiment; 

15 Figure 12 is a PAID authorization display screen in accordance with a 
preferred embodiment; 

Figure 13 is a cancellation of authorization display screen in 
accordance with a preferred embodiment; 

20 

Figure 14 illustrates a Main screen in accordance with a preferred 
embodiment of the invention; 



25 Figure 15 is an illustration of an Administration display screen in 
accordance with a preferred embodiment; 

Figure 16 illustrates a display of the wallet administration page in 
accordance with a preferred embodiment; 



30 
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Figure 17 is a payment administration window in accordance with a 
preferred embodiment; 

Figure 18 is an illustration of the administration preferences page in 
5 accordance with a preferred embodiment; 

Figure 19 illustrates the window controls in accordance with a 
preferred embodiment; 

10 Figure 20 is a register display in accordance with a preferred 
embodiment of the invention; 

Figure 21 is register detail display in accordance with a preferred 
embodiment; 

15 

Figure 22 is a register find display in accordance with a preferred 
embodiment; 

Figure 23 is a register customize display in accordance with a 
20 preferred embodiment; 

Figure 24 is a register output display for directing the output target 
for register information; 

25 Figure 25 is a report of a wallet in accordance with a preferred 
embodiment; 

Figure 26 illustrates a report customize display in accordance with a 
preferred embodiment; and 
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Figure 27 is a report output display in accordance with a preferred 
embodiment; 

5 Figure 28 illustrates a set of images illustrating "open" and "closed* 
icons for payment holders in accordance with a preferred embodiment; 

Figure 29 is an illustration of a certificate issuance form in 
accordance with a preferred embodiment; 

10 

Figure 30 illustrates a certificate issuance response in accordance 
with a preferred embodiment; 

Figure 31 illustrates a collection of payment instrument holders in 
15 accordance with a preferred embodiment; 

Figure 32 illustrates the default payment instrument bitmap in 
accordance with a preferred embodiment; 

20 Figure 33 illustrates a selected payment instrument with a fill in the 
blanks for the cardholder in accordance with a preferred embodiment; 
and 

Figure 34 illustrates a coffee purchase utilizing the newly defined 
25 VISA card in accordance with a preferred embodiment of the 
invention. 

Detailed Description 

A preferred embodiment of a system in accordance with the present 
30 invention is preferably practiced in the context of a personal computer 
such as the IBM PS/2, Apple Macintosh computer or UNIX based 
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workstation. A representative hardware environment is depicted in 
Figure 1A, which illustrates a typical hardware configuration of a 
workstation in accordance with a preferred embodiment having a 
central processing unit 110, such as a microprocessor, and a number 
5 of other units interconnected via a system bus 112. The workstation 
shown in Figure 1 includes a Random Access Memory (RAM) 114, 
Read Only Memory (ROM) 116, an I/O adapter 118 for connecting 
peripheral devices such as disk storage units 120 to the bus 112, a 
user interface adapter 122 for connecting a keyboard 124, a mouse 

10 126, a speaker 128, a microphone 132, and/or other user interface 
devices such as a touch screen (not shown) to the bus 112, 
communication adapter 134 for connecting the workstation to a 
communication network (e.g., a data processing network) and a 
display adapter 136 for connecting the bus 112 to a display device 

15 138. The workstation typically has resident thereon an operating 
system such as the Microsoft Windows Operating System (OS), the 
IBM OS/2 operating system, the MAC OS, or UNIX operating system. 
Those skilled in the art will appreciate that the present invention may 
also be implemented on platforms and operating systems other than 

20 those mentioned. 

A preferred embodiment is written using JAVA, C, and the C++ 
language and utilizes object oriented programming methodology. 
Object oriented programming (OOP) has become increasingly used to 

25 develop complex applications. As OOP moves toward the mainstream 
of software design and development, various software solutions will 
need to be adapted to make use of the benefits of OOP. A need exists 
for these principles of OOP to be applied to a messaging interface of an 
electronic messaging system such that a set of OOP classes and 

30 objects for the messaging interface can be provided. 
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OOP is a process of developing computer software using objects, 
including the steps of analyzing the problem, designing the system, 
and constructing the program. An object is a software package that 
contains both data and a collection of related structures and 
procedures. Since it contains both data and a collection of structures 
and procedures, it can be visualized as a self-sufficient component 
that does not require other additional structures, procedures or data 
to perform its specific task. OOP, therefore, views a computer 
program as a collection of largely autonomous components, called 
objects, each of which is responsible for a specific task. This concept 
of packaging data, structures, and procedures together in one 
component or module is called encapsulation. 



10 



In general, OOP components are reusable software modules which 
1 5 present an interface that conforms to an object model and which are 
accessed at run-time through a component integration architecture. 
A component integration architecture is a set of architecture 
mechanisms which allow software modules in different process spaces 
to utilize each others capabilities or functions. This is generally done 
20 by assuming a common component object model on which to build the 
architecture. 

It is worthwhile to differentiate between an object and a class of 
objects at this point. An object is a single instance of the class of 
25 objects, which is often just called a class. A class of objects can be 
viewed as a blueprint, from which many objects can be formed. 

OOP allows the programmer to create an object that is a part of 
another object. For example, the object representing a piston engine 
30 is said to have a composition-relationship with the object representing 
a piston. In reality, a piston engine comprises a piston, valves and 
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many other components; the fact that a piston is an element of a 
piston engine can be logically and semantically represented in OOP by 
two objects. 

5 OOP also allows creation of an object that "depends from" another 
object. If there are two objects, one representing a piston engine and 
the other representing a piston engine wherein the piston is made of 
ceramic, then the relationship between the two objects is not that of 
composition. A ceramic piston engine does not make up a piston 

10 engine. Rather it is merely one kind of piston engine that has one 
more limitation than the piston engine; its piston is made of ceramic. 
In this case, the object representing the ceramic piston engine is 
called a derived object, and it inherits all of the aspects of the object 
representing the piston engine and adds further limitation or detail to 

15 it. The object representing the ceramic piston engine "depends from" 
the object representing the piston engine. The relationship between 
these objects is called inheritance. 

When the object or class representing the ceramic piston engine 
20 inherits all of the aspects of the objects representing the piston 
engine, it inherits the thermal characteristics of a standard piston 
defined in the piston engine class. However, the ceramic piston 
engine object overrides these ceramic specific thermal characteristics, 
which are typically different from those associated with a metal piston. 
25 It skips over the original and uses new functions related to ceramic 
pistons. Different kinds of piston engines will have different 
characteristics, but may have the same underlying functions 
associates with it (e.g., how many pistons in the engine, ignition 
sequences, lubrication, etc.). To access each of these functions in any 
30 piston engine object, a programmer would call the same functions 
with the same names, but each type of piston engine may have 
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25 



30 



different/overriding implementations of functions behind the same 
name. This ability to hide different implementations of a function 
behind the same name is called polymorphism and it greatly simplifies 
communication among objects. 

5 

With the concepts of composition-relationship, encapsulation, 
inheritance and polymorphism, an object can represent just about 
anything in the real world. In fact, our logical perception of the reality 
is the only limit on determining the kinds of things that can become 
1 0 objects in object-oriented software. Some typical categories are as 
follows: 

Objects can represent physical objects, such as automobiles in 
a traffic-flow simulation, electrical components in a circuit-design 
program, countries in an economics model, or aircraft in an air-traffic- 
15 control system. 

Objects can represent elements of the computer-user 
environment such as windows, menus or graphics objects. 

An object can represent an inventory, such as a personnel file or 
a table of the latitudes and longitudes of cities. 

An object can represent user-defined data types such as time, 
angles, and complex numbers, or points on the plane. 

With this enormous capability of an object to represent just about any 
logically separable matters, OOP allows the software developer to 
design and implement a computer program that is a model of some 
aspects of reality, whether that reality is a physical entity, a process, a 
system, or a composition of matter. Since the object can represent 
anything, the software developer can create an object which can be 
used as a component in a larger software project in the future. 
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If 90% of a new OOP software program consists of proven, existing 
components made from preexisting reusable objects, then only the 
remaining 10% of the new software project has to be written and 
tested from scratch. Since 90% already came from an inventory of 
5 extensively tested reusable objects, the potential domain from which 
an error could originate is 10% of the program. As a result, OOP 
enables software developers to build objects out of other, previously 
built, objects. 

10 This process closely resembles complex machinery being built out of 
assemblies and sub-assemblies. OOP technology, therefore, makes 
software engineering more like hardware engineering in that software 
is built from existing components, which are available to the developer 
as objects. All this adds up to an improved quality of the software as 

15 well as an increased speed of its development. 

Programming languages are beginning to fully support the OOP 
principles, such as encapsulation, inheritance, polymorphism, and 
composition-relationship. With the advent of the C++ language, many 

20 commercial software developers have embraced OOP. C++ is an OOP 
language that offers a fast, machine-executable code. Furthermore, 
C++ is suitable for both commercial-application and systems- 
programming projects. For now, C++ appears to be the most popular 
choice among many OOP programmers, but there is a host of other 

25 OOP languages, such as Smalltalk, common lisp object system 

(CLOS), and Eiffel. Additionally, OOP capabilities are being added to 
more traditional popular computer programming languages such as 
Pascal. 

30 The benefits of object classes can be summarized, as follows: 
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• Objects and their corresponding classes break down complex 
programming problems into many smaller, simpler problems. 

• Encapsulation enforces data abstraction through the 
organization of data into small, independent objects that can 

5 communicate with each other. Encapsulation protects the data in an 
object from accidental damage, but allows other objects to interact 
with that data by calling the object's member functions and 
structures. 

• Subclassing and inheritance make it possible to extend and 
10 modify objects through deriving new kinds of objects from the 

standard classes available in the system. Thus, new capabilities are 
created without having to start from scratch. 

Polymorphism and multiple inheritance make it possible for 
different programmers to mix and match characteristics of many 
1 5 different classes and create specialized objects that can still work with 
related objects in predictable ways. 

• Class hierarchies and containment hierarchies provide a flexible 
mechanism for modeling real-world objects and the relationships 
among them. 

20 • Libraries of reusable classes are useful in many situations, but 
they also have some limitations. For example: 

• Complexity. In a complex system, the class hierarchies for 
related classes can become extremely confusing, with many dozens or 
even hundreds of classes. 

25 • Flow of control A program written with the aid of class libraries 
is still responsible for the flow of control (i.e., it must control the 
interactions among all the objects created from a particular library). 
The programmer has to decide which functions to call at what times 
for which kinds of objects. 

30 • Duplication of effort. Although class libraries allow programmers 
to use and reuse many small pieces of code, each programmer puts 
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those pieces together in a different way. Two different programmers 
can use the same set of class libraries to write two programs that do 
exactly the same thing but whose internal structure (i.e., design) may 
be quite different, depending on hundreds of small decisions each 
5 programmer makes along the way. Inevitably, similar pieces of code 
end up doing similar things in slightly different ways and do not work 
as well together as they should. 



Class libraries are very flexible. As programs grow more complex, 
10 more programmers are forced to reinvent basic solutions to basic 

problems over and over again. A relatively new extension of the class 
library concept is to have a framework of class libraries. This 
framework is more complex and consists of significant collections of 
collaborating classes that capture both the small scale patterns and 
15 major mechanisms that implement the common requirements and 
design in a specific application domain. They were first developed to 
free application programmers from the chores involved in displaying 
menus, windows, dialog boxes, and other standard user interface 
elements for personal computers. 

20 

Frameworks also represent a change in the way programmers think 
about the interaction between the code they write and code written by 
others. In the early days of procedural programming, the programmer 
called libraries provided by the operating system to perform certain 
25 tasks, but basically the program executed down the page from start to 
finish, and the programmer was solely responsible for the flow of 
control. This was appropriate for printing out paychecks, calculating 
a mathematical table, or solving other problems with a program that 
executed in just one way. 



30 
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The development of graphical user interfaces began to turn this 
procedural programming arrangement inside out. These interfaces 
allow the user, rather than program logic, to drive the program and 
decide when certain actions should be performed. Today, most 
personal computer software accomplishes this by means of an event 
loop which monitors the mouse, keyboard, and other sources of 
external events and calls the appropriate parts of the programmer's 
code according to actions that the user performs. The programmer no 
longer determines the order in which events occur. Instead, a 
program is divided into separate pieces that are called at 
unpredictable times and in an unpredictable order. By relinquishing 
control in this way to users, the developer creates a program that is 
much easier to use. Nevertheless, individual pieces of the program 
written by the developer still call libraries provided by the operating 
1 5 system to accomplish certain tasks, and the programmer must still 
determine the flow of control within each piece after it's called by the 
event loop. Application code still "sits on top of the system. 

Even event loop programs require programmers to write a lot of code 
20 that should not need to be written separately for every application. 
The concept of an application framework carries the event loop 
concept further. Instead of dealing with all the nuts and bolts of 
constructing basic menus, windows, and dialog boxes and then 
making these things all work together, programmers using application 
25 frameworks start with working application code and basic user 

interface elements in place. Subsequently, they build from there by 
replacing some of the generic capabilities of the framework with the 
specific capabilities of the intended application. 

30 Application frameworks reduce the total amount of code that a 
programmer has to write from scratch. However, because the 
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framework is really a generic application that displays windows, 
supports copy and paste, and so on, the programmer can also 
relinquish control to a greater degree than event loop programs 
permit. The framework code takes care of almost all event handling 
5 and flow of control, and the programmer's code is called only when the 
framework needs it (e.g., to create or manipulate a proprietary data 
structure). 

A programmer writing a framework program not only relinquishes 
10 control to the user (as is also true for event loop programs), but also 
relinquishes the detailed flow of control within the program to the 
framework. This approach allows the creation of more complex 
systems that work together in interesting ways, as opposed to isolated 
programs, having custom code, being created over and over again for 
1 5 similar problems. 

Thus, as is explained above, a framework basically is a collection of 
cooperating classes that make up a reusable design solution for a 
given problem domain. It typically includes objects that provide 
20 default behavior (e.g., for menus and windows), and programmers use 
it by inheriting some of that default behavior and overriding other 
behavior so that the framework calls application code at the 
appropriate times. 

There are three main differences between frameworks and class 

25 libraries: 

Behavior versus protocol Class libraries are essentially 
collections of behaviors that you can call when you want those 
individual behaviors in your program. A framework, on the other 
hand, provides not only behavior but also the protocol or set of rules 

30 that govern the ways in which behaviors can be combined, including 
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rules for what a programmer is supposed to provide versus what the 
framework provides. 

Call versus override. With a class library, the code the 
programmer instantiates objects and calls their member functions. 
5 It's possible to instantiate and call objects in the same way with a 
framework (i.e., to treat the framework as a class library), but to take 
full advantage of a framework's reusable design, a programmer 
typically writes code that overrides and is called by the framework. 
The framework manages the flow of control among its objects. Writing 
1 0 a program involves dividing responsibilities among the various pieces 
of software that are called by the framework rather than specifying 
how the different pieces should work together. 

Implementation versus design. With class libraries, 
programmers reuse only implementations, whereas with frameworks, 
15 they reuse design. A framework embodies the way a family of related 
programs or pieces of software work. It represents a generic design 
solution that can be adapted to a variety of specific problems in a 
given domain. For example, a single framework can embody the way a 
user interface works, even though two different user interfaces created 
20 with the same framework might solve quite different interface 
problems. 



Thus, through the development of frameworks for solutions to various 
problems and programming tasks, significant reductions in the design 

25 and development effort for software can be achieved. 

A preferred embodiment of the invention utilizes HypeiText Markup 
Language (HTML) to implement documents on the Internet. HTML is a 
simple data format used to create hypertext documents that are 
portable from one platform to another. HTML documents are SGML 

30 documents with generic semantics that are appropriate for 

representing information from a wide range of domains. HTML has 
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been in use by the World-Wide Web global information initiative since 
1990. HTML is an application of ISO Standard 8879: 1986 
Information Processing Text and Office Systems; Standard 
Generalized Markup Language (SGML). 

5 

To date, Web development tools have been limited in their ability to 
create dynamic Web applications which span from client to server and 
interoperate with existing computing resources. Until recently, HTML 
has been the dominant technology used in development of Web-based 

10 solutions. However, HTML has proven to be inadequate in the 
following areas: 
o Poor performance; 
o Restricted user interface capabilities; 
o Can only produce static Web pages; 

15 o Lack of interoperability with existing applications and data; and 
o Inability to scale. 

Sun Microsystem's Java language solves many of the client-side 
problems by: 

o Improving performance on the client side; 
20 o Enabling the creation of dynamic, real-time Web applications; 
and 

o Providing the ability to create a wide variety of user interface 
components. 

With Java, developers can create robust User Interface (UI) 
25 components. Custom "widgets" (e.g. real-time stock tickers, animated 
icons, etc.) can be created, and client-side performance is improved. 
Unlike HTML, Java supports the notion of client-side validation, 
offloading appropriate processing onto the client for improved 
performance. Dynamic, real-time Web pages can be created. Using 
30 the above-mentioned custom Ul components, dynamic Web pages can 
also be created. 
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Sun's Java language has emerged as an industry-recognized language 
for "programming the Internet." Sun defines Java as: "a simple, 
object-oriented, distributed, interpreted, robust, secure, architecture- 
5 neutral, portable, high-performance, multithreaded, dynamic, 

buzzword-compliant, general-purpose programming language. Java 
supports programming for the Internet in the form of platform- 
independent Java applets.* Java applets are small, specialized 
applications that comply with Sun's Java Application Programming 
10 Interface (API) allowing developers to add "interactive content" to Web 
documents (e.g. simple animations, page adornments, basic games, 
etc.). Applets execute within a Java-compatible browser (e.g. Netscape 
Navigator) by copying code from the server to client. From a language 
standpoint, Java's core feature set is based on C++. Sun's Java 
15 literature states that Java is basically "C++, with extensions from 
Objective C for more dynamic method resolution". 

Another technology that provides similar function to JAVA is provided 
by Microsoft and ActiveX Technologies, to give developers and Web 

20 designers wherewithal to build dynamic content for the Internet and 
personal computers. ActiveX includes tools for developing animation, 
3-D virtual reality, video and other multimedia content. The tools use 
Internet standards, work on multiple platforms, and are being 
supported by over 100 companies. The group's building blocks are 

25 called ActiveX Controls, small, fast components that enable developers 
to embed parts of software in hypertext markup language (HTML) 
pages. ActiveX Controls work with a variety of programming languages 
including Microsoft Visual C++, Borland Delphi, Microsoft Visual Basic 
programming system and, in the future, Microsoft's development tool 

30 for Java, code named "Jakarta. " ActiveX Technologies also includes 
ActiveX Server Framework, allowing developers to create server 
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applications. One of ordinary skill in the art will readily recognize that 
ActiveX could be substituted for JAVA without undue experimentation 
to practice the invention. 



5 Figure IB is a block diagram of a preferred embodiment of the system 
utilizing native code. The major components of the system are 
described below with reference to Figure IB. The mechant web site 
180 contains the shopping Common Gateway Interface (CGI) 190 
which is provided by the merchant or other web server communication 

10 system. The CGI is an interface which allows applications to access, 
process and respond to incoming messages. Industry slang is to refer 
to CGI scripts as a way of saying that a programmer is writing web 
server applications in scripting languages. A CGI script is a type of 
software application program. Merchants typically are setup with 

15 programs for authorization that are made up of CGI scripts. A 

certificate of authority will also have a web server and the handling of 
certificate requests will utilize CGI scripts. Consumers interact with 
this system to shop at the merchant site. The merchant system also 
accepts payment transactions originating from the consumer using 

20 the PayWindow helper application. The payment instruction 192 is a 
file representing the Multipurpose Internet Mail Extension (MIME) 
message that is created by the merchant system when the consumer 
elects to pay. This MIME message contains the order information and 
the payment instructions which are specific to the merchant. The 

25 order information contains the Goods and Services Order (GSO), 
shipping address, merchant Uniform Resource Locator (URL), 
merchant certificate, merchant name and address, and transaction ID 
associated with the order. The payment instructions contains the 
payment instruments that the merchant accepts and the payment 

30 protocol preferences. 



10 



20 
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On receiving the MIME message from the merchant system* the 
browser launches the PayWindow application which is defined as a 
helper application in the browser. The browser sends the MIME 
message to the PayWindow and the PayWindow interacts with the 
5 consumer to complete the payment. One of ordinary skill in the art 
will readily comprehend that Java, Netscape/Oracle plugins and 
ActiveX could readily be substituted for the MIME message underlying 
the architecture of this embodiment. A Java embodiment is presented 
below as an alternative embodiment to provide another example in 
accordance with another preferred embodiment. 
The Address Instructions file 194 contains information, representative 
of the MIME message that is created by the merchant system when 
the consumer clicks on a button on the merchant's web page for an 
automatic fill-in of his or her address from the wallet database. The 
MIME message contains the merchant's URL and the type of address 
that the merchant is seeking from the wallet database. The wallets 
contain the consumer's shipping and billing address. Once the MIME 
message is received from the merchant system, the browser launches 
the Address Requisition application 176 of the Verifone Web Site 184 
which is defined as a helper application in the browser. The Address 
Requisition application 146, 176 interacts with the consumer to 
complete the address requisition request. 



15 



25 



30 



The Certificate Issuance at the Bank Web Site 162 resides at the bank 
web site 182. It is utilized for issuing SET complaint / X.500 
certificates to consumers. The implementation of this system may 
vary from one bank to another. However, at a high level, this system 
gathers consumer's personal information. After processing the 
information, the system issues a certificate along with a payment 
instrument to the consumer. 
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The Single Account Wallet 160 at the bank web site 182 represents 
the MIME message that is created by the Certificate Issuance system. 
This MIME message contains a VeriFone wallet. The VeriFone wallet 
contains a single payment instrument and the certificate associated 
5 with it. For security reasons, the private key is not included in the 
wallet. The has to specify a private key before using the instrument for 
payment. When the consumer is issued the certificate, this MIME 
message is sent to the browser. The browser launches the Certificate 
Installation application 174, 144 which is defined as a helper 
10 application in the browser. The Certificate Installation application 
174, 144 reads the MIME message and install the wallet into the 
wallet database 158. 

Various helper applications 198, 172, 174, 176 are provided to make 
15 the consumer's shopping experience easy and efficient including the 
following helper applications. The Paywindow helper application 188 
is utilized by the consumer to authorize the payment to the merchant, 
to administer their wallets, to review their previously completed 
payment transactions and to perform housekeeping activities on the 
20 wallets. This application is defined as a 'helper' application on the 

consumer's desktop. The browser launches this application when the 
merchant system sends a MIME message requesting payment. 

The PayWindow Setup Helper application 172 is used by the 
25 consumer to install helper applications and other modules from the 
web site onto the consumer desktop. When a consumer attempts to 
install an application for a first time, the consumer does not have a 
helper application on the desktop. Thus, the first time installation of 
an application requires a consumer to perform two steps. First the 
30 user must download the system package to their desktop and then the 
user must run setup to decompress and install the system. Thereafter, 
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whenever the consumer gets a new release of system software, the 
browser launches this helper application which in turn installs the 
appropriate other system modules. 



5 The Certificate Installation Helper Application 174 is utilized to install 
a wallet that is issued by a bank. When the bank's certificate issuance 
web system sends the MIME message containing the VeriFone wallet, 
the browser launches this application. This application queries a 
consumer to determine if the payment instrument contained in the 
10 wallet is to be copied to an existing wallet or to be kept in the new 
wallet. This application then installs the payment instrument and the 
certificate into the wallet database 158. 

The Address Requisition Helper Application 176 is utilized by a 
15 consumer to send his or her address from a specified wallet directly to 
the merchant system. When the merchant system sends the MIME 
message requesting the consumer's shipping and/or billing address, 
the browser launches this application. This application 176 queries a 
consumer to open a wallet if a wallet is not already open and show the 
20 requested address to the consumer. Once the consumer okays the 
address, the application 'posts' the requested information via an 
HTML form to the merchant. The HTML format of this form is 
standardized. Every merchant system electing to use this (Address 
Requisition) feature accepts this form. In addition there are other 
25 software modules that is required to run the helper applications. First 
time around, these modules and the helper applications is 
downloaded and installed by the consumer on his or her desktop. 
Thereafter the Setup Helper application 172 automatically installs 
future releases of helper applications or other software modules. 
30 Whereas an address requisition is presented as an embodiment, one 
of ordinary skill in the art will readily comprehend that clothing sizes, 
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music preferences, mother's name or other information to assist a 
merchant can also be uploaded via similar means without departing 
from this embodiment. 

Figure 2 provides an alternative preferred embodiment in accordance 
5 with a Java based implementation of the invention. Java is a network 
application enabler for applications that utilize the Internet and 
HTML. Java is an object-oriented langugage that was developed by 
Sun Microsystems to speed development of their network applications. 

10 Only the differences between the native embodiment discussed earlier 
and the Java version is addressed to clarify the discussion. A 
Payment Instruction Applet 200 at the Merchant Web Site 180 is 
responsible for delivering the order information to the PayWindow 
Applet 210, 230 on the consumer's desktop 186. This order 

15 information has the same information that is contained in the . 
Payment Instruction MIME message which was described in the 
PayWindow System View Native Code section. 

The applet is a part of the payment HTML 192 page which is displayed 
20 by the merchant to the consumer. The applet requires that the 

following parameters be set with appropriate data when the payment 
page is generated by the merchant system GSO, Shipping Address, 
Merchant, Merchant Certificate, Merchant URL and Button Text. The 
applet 200 displays a button called "Pay', "Use PayWindow" or the 
25 value of the Button Text parameter. Once clicked, the applet delivers 
the above information to the PayWindow applet on the consumer's 
desktop. The consumer interacts with the PayWindow 210 Applet to 
complete the payment transaction. 

30 The Address Requisition Applet 204 at the Merchant Web Site 18 is 
utilized by the merchant system 180 to obtain a consumer's shipping 
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arid/or billing address. This applet is displayed on the HTML page 
which accepts the consumer's shipping or billing address. The applet 
displays a button called «V-wallet" or the value of the Button Text 
parameter. Once clicked, the applet 204 launches the AddressWindow 
5 applet 214 utilizing the consumer's address. The AddressWindow 
applet 214 interacts with the consumer and send the address 
information to the merchant system 180. The address information is 
then processed consistent with the processing in the native system. 



10 



15 



The Certificate Issuance CGI scripts 162 and the Single Account 
Wallet 160 at the Bank Web Site 182 is processed as described in the 
native system. The Certificate Installation Applet 220 of the Bank 
Web Site 182 is utilized by the Certificate Issuance CGI scripts 162 
system to deliver a consumer's certificate to the consumer's desktop. 



A variety of applets are provided at a web site to make the consumer's 
shopping experience easy and efficient. These helper applications 
include a Setup Applet 212, Pay Window Applet 210 and an 
AddressWindow Applet 214 similar to the PayWindow Helper 
20 Application Native section discussed above. 



Figure 3 is an architecture block diagram in accordance with a 
preferred embodiment of the subject invention. Processing 
commences at function block 300 where the Graphical User Interface 
(GUI) part of the application is initialized. The GUI application 300 
provides the consumer with support for ordering and making 
payments during the shopping process. There are also GUI 
components provided for wallet creation; importing, certificate and 
payment method creation and maintenance; and for transaction 
register review and reporting. The screen designs, and their 
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associated logic, for the helper applications and applets are 
individually discussed in detail below. 



The Certificate Manager 304 manages the automatic downloading of a 
5 consumer's certificate from a bank, validation of a consumer's and a 
merchant's certificates and automatic requisition of certificate 
renewal. 

The Payment Manager 306 coordinates and completes the payment 
10 request that is received from the merchant system. The payment 
request is received via a MIME message in the native code 
implementation or via an applet in the Java implementation. The 
payment request received contains the final GSO, Ship-To name, 
merchant certificate, merchant URL, coupons and the payment 
15 amount. The manager 306 then communicates with the payment 

related GUI component to interact with the consumer to authorize and 
complete the payment transaction. The manager is also responsible 
for determining the payment protocol based on the consumer's 
payment instrument and the merchant's preferred payment protocol. 

20 

The manager 306 includes a well defined Application Programming 
Interface (API) which enables OEMs to interface with the payment 
manager 306 to make payments to specific HTTP sites. The detailed 
logic associated with the payment manager 306 is presented in Figure 
25 4. 

The payment manager 306 enforces standard operations in the 
payment process. For example the receipt and the transaction record 
can automatically be transferred to the Wallet file once the payment is 
30 completed. The payment manager architecture in accordance with a 
preferred embodiment is presented in Figure 4. A user interfaces with 
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the payment manager 430 via a user interface 400 that responds to 
and sends a variety of transactions 410, 408, 406, 404 and 402. The 
transactions include obtaining the next record, payment record, 
receipt, acceptance of the payment instrument and GSO components. 

5 

In turn, the payment manager 430 sends transactions 414 and 
receipts 420 to the wallet manager 422 and receives payment 
instruments, certificates and private keys from the wallet manager 
422. 

10 

The payment manager 430 also sends and receives transactions to the 
protocol manager 470 including a merchant's payment message 460, 
a consumer certificate and PK handle 450, a merchant URL 442, a 
payment 440, a signed receipt 434 and a GSO, Selected Payment 

15 Protocol and Selected Payment Instrument 432. The payment 

manager 430 also accepts input from the payment applet or MIME 
message from the merchant as shown at function block 480. One 
aspect of the payment processing is a Consumer Payments Class 
Library (CPCL) 470 which encapsulates the payment protocols into a 

20 single API. By encapsulating" the payment protocols, applications are 
insulated from protocol variations. A SET Protocol provides an 
implementation of the client-side component of the Secure Electronic 
Transaction (SET) Protocol. A complete implementation of the client- 
side component of the CyberCash micro-payment protocol is also 

25 provided. 

The Wallet Manager 422 provides a standard interface to the wallet. It 
defines the wallet database structures and the payment instrument 
data structures, controls the access to the wallet and provides 
30 concurrency checking if more than one application attempts to open 
the same wallet. The interface to the wallet manager 422 is published 
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to allow OEMs to interface with the wallet manager and access the 
wallet database. 

The wallet manager consists of the following sub-components: 
Wallet Access. This component provides an interface to read and 
5 write wallet information. 

Transaction Manager. This component provides an interface to read 
and write transaction corresponding to a wallet into the wallet 
database. 

Payment Instrument Manager. This component manager provides a 
10 common interface to the specific payment instrument access 
components. 

Credit Card Access, Debit Card Access, Check Access. These 
components deal with a specific payment instrument. 



15 A Data Manager provides storage and retrieval of generic data items 
and database records. It is assumed that data fields, index fields or 
entire data records can be marked as encrypted and the encryption 
process is largely automated. The data manager has no specific 
knowledge of database records appropriate to different payment 

20 methods. This layer is separated out so as to reduce changes required 
when new payment methods are introduced. However RSA key pairs 
and certificates might be considered as "simple" data types. This 
component also provides an abstraction which supports wallet files on 
computer disk or contained in smart cards. 

25 

The Open Data Base Connectivity (ODBC) /Java Data Base 
Connectivity (JDBC) component provides Data Base Connectivity 
where formal database components are required. An embodiment of 
the Smart Card Wallet allows wallet data to be stored and/or secured 
30 by a cryptographic token. 
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A preferred embodiment includes a single file or directory of files 
comprising a "wallet" which contains personal information and 
information about multiple payment methods with the preferred 
implementation. These payment methods ( Visa cards, debit cards, 
5 smart cards, micro-payments etc. ) also contain information such as 
account numbers, certificates, key pairs, expiration dates etc. The 
wallet is envisaged to also contain all the receipts and transaction 
records pertaining to every payment made using the wallet. A 
Cryptographic API component provides a standard interface for RSA 
10 and related cryptographic software or hardware. This support 

includes encryption, signature, and key generation. Choice of key 
exchange algorithm, symmetric encryption algorithm, and signature 
algorithm should all be configurable. A base class stipulates generic 
behavior, derived classes handle various semantic options (e.g. 
15 software based cryptography versus hardware based cryptography.) 



The Cryptographic Software portion provides RSA and DES support. 
This may be provided utilizing the SUN, RSA or Microsoft system 
.... components depending on the implementation selected for a 
20 particular customer. Cryptographic Hardware creates a lower level 
API which can underpin the Cryptography API and be utilized to 
replace Cryptography Software with an off the shelf cryptography 
engine. 

25 The message sequence charts describe the flow of messages/ data 
between the consumer, the browser and/or the various major 
components of the Semeru system. The major components of the 
system are the Merchant system which includes the vPOS, the 
PayWindow, and the Payment Gateway. The merchant system allows 

30 a consumer to shop, accept the payment transactions sent by the 
PayWindow application, and send payment transactions to the 
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acquiring bank. The Consumer Payments Class Library (CPCL) 
module is a layer within the application which sends the payment 
transactions, securely, from the consumer to the merchant. 

5 Figure 5 is a Consumer Payment Message Sequence Diagram in 
accordance with a preferred embodiment of the invention. The 
diagram presents the flow of messages between the consumer, the 
browser, the merchant system, the Pay Window application, and CPCL. 
This message flow describes the payment process from the time an 
10 order is completed and the consumer elects to pay, to the time the 
payment is approved and the receipt is returned to the consumer. 

The difference between the Native implementation and Java 
implementation of the PayWindow application is in the delivery of the 

15 order information to the PayWindow. Once the order information is 
received by the PayWindow, the flow of messages/ data is the same for 
both implementations. In the case of the Native implementation, the 
order information is delivered via a MIME message. This MIME 
message is sent to the PayWindow by the browser via a document file. 

20 In the Java implementation, the order information is delivered to the 
PayWindow by an applet. The merchant system sends an applet with 
the order information to the browser which in turn delivers the order 
to the PayWindow. Once the order is received, the PayWindow 
interacts with the consumer and the Protocol modules for the 

25 completion of the payment process. 

Enters Order and Clicks Calculate Order 520 

This message represent the consumer order entry and the clicking of 
the 'Calculate Order' button. The consumer's shopping experience is 
30 all condensed into this one message flow for the purpose of 

highlighting the payment process. The actual implementation of the 
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shopping process varies, however, the purpose does not, which is the 
creation of the order. 
Order 530 

This message represents the order information which is sent by the 
5 browser to the merchant via an HTML form. 

Payment Applet with GSO, PPPs. Ms. merchant certificate and URL 
540 

On receipt of the order, the merchant system calculates the payment 
10 amount. This message represents the HTML page which is sent by the 
merchant system detailing the payment amount along with the Java 
payment applet which contains the GSO, PPPs, AIs, merchant 
certificate and URL. 

15 Run Payment Applet 545 

The Java enabled browser runs the Payment applet. The applet 
displays a button called "Pay" for the consumer to click. This is 
embedded in the HTML page delivered by the merchant. 

20 Clicks Pay 550 

This message represents the clicking of the Pay button on the browser 
by the consumer after confirming the payment amount. 

GSO. PPPs. AIs. merchant certificate and URL 560 
25 This message represents the GSO, PPPs, AIs, merchant certificate and 
the merchant URL carried by the Java applet. The Java applet now 
delivers these to the PayWindow application. 



30 



Merchant certificate 562 

This message represents the merchant's certificate which is sent to 
the CPCL module for checking the validity of the merchant. 
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Merchants validity 564 

The CPCL modules examines the merchant's certificate and send this 
message to the PayWindow indicating whether or not the merchant is 
5 a valid merchant. 

Wallet, Payment Instruments 566 

This message represents the wallets and payment instruments that is 
displayed to the consumer; Not all payment instruments from a wallet 
10 is shown to the consumer. Only the ones accepted by the merchant is 
shown. 

Payment Instrument 568 

This message represents the payment instrument selected by the 
15 consumer. This message is created in the current design when the 
user double clicks on the payment image in the "Select Payment 
Method" Window. 

GSO 570 

20 This indicates that the GSO is displayed to the consumer in the 
"Make Payment Authorization" screen. 

Authorization of Payment 572 

This message represents the authorization of the payment by the 
25 consumer. The consumer authorizes the payment by clicking the 
'Accept' button on the "Payment Authorization" screen. 

Decide Payment Protocol 574 

Once the consumer authorizes the payment, the payment protocol is 
30 decided by PayWindow based on the merchant's Payment Protocol 
Preferences and the consumer selected payment instrument. 



WO 97/41540 PCT/US97/06938 

05- 

Pavment Authorization 575 

These messages represent the merchant's URL, the GSO, payment 
protocol (PP) to use, account number, certificate and the private key 
handle (PK) associated with the payment instrument which is sent to 
5 the protocol module. 

GSO with Payment Authorization 576 

This message represents the payment instructions which is sent by 
the protocol module to the Merchant system. The GSO, PI, consumer 
10 certificate and PK is packaged based on the payment protocol. 

Signed Receipt 578 

This message represents the digitally signed transaction receipt 
received by the protocol module from the merchant. 

15 

Save Receipt with hash value 580 

The digitally signed transaction receipt is saved by the PayWindow for 
future reference. 

20 Payment Successful 582 

This indicates that the transaction receipt and the 'payment 
successful' have been displayed to the consumer. 

PayWindow Requirements in Accordance 
25 With a Preferred Embodiment 

There are various requirements that a consumer demands of a 
paywindow application, such as, support for a particular target 
hardware platform, secure communication of payment information on 
the public network, easy configuration and accessibility, simplified 
10 order entry and transaction completion, store payment instrument 
information safely and securely, provide a wide variety of payment 
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instruments, retain URLs of consumer's favorite shops, launch 
browser from the payment window to visit shops, keep records and 
export records for transaction data, provide shopping assistance, 
support multiple users with a single application, display merchant 
5 certificate and payment forms that are acceptable to a particular 

merchant, manage digital credentials, provide multiple accounts for a 
single payment type, provide support for merchant value add or 
loyalty programs and the support must be portable to another client 
machine. 

10 

A merchant has a different set of requirements for a payment 
application which include: consistent information format; loyalty and 
branding opportunities; multiple payment types for a consumer to 
select from; tight integration with a merchant store; links from the 

15 system to the merchant's store, better risk management / rates 

utilizing the system. A link could be a hypertext connetion between 
two displays, a point-to-point connection between areas in a single 
display, a Uniform Resource Locator (URL), an index, a reference to an 
address or other means which facilitates transfer of control from one 

20 area of execution to another area of execution (across machines, 
network locations or even satellite linkages and microwave 
transmissions). 

A preferred embodiment in accordance with the invention provides a 
25 software application used by the consumer to make electronic 

payments. It runs on the consumer's workstation and is either a free 
standing application to a WWW browser c " is embedded into a custom 
application, and is invoked whenever the consumer has completed the 
ordering process for a particular item and is ready to pay. 



30 
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The Pay Window application in accordance with a preferred 
embodiment supports multiple local users. Each user's data is 
independently stored and secured. On program startup, a user must 
sign in with an ID and password. All information (on local disk or 
5 floppy) is encrypted with a password entered by the user each time the 
program is invoked. 

Payment Instruments 

Due to the varying size of transactions and differing payment 
10 instrument usage related to social, economic and cultural factors, 
support is required for multiple payment instruments. Much like 
today, a consumer making a purchase from a merchant must have a 
choice of payment methods depending upon their personal preference. 
The supported payment instruments include: credit cards, electronic 
15 checks, electronic money, micropayment (electronic coin), debit card 
and smart cards. 

Secure Payment Protocol 

One of the core features in accordance with a preferred embodiment is 
20 the ability to accept and make payments in a secure and reliable 

manner. Secure payment on the Internet becomes as safe and reliable 
as Point of Sale (POS) terminals today with payment solutions in 
accordance with another aspect of the present invention. While 
selection of a security protocol can be considered a technical design 
25 consideration, there is high marketing value in supplying quick time 
to market in the solution. 

Payment Process 

The payment process is separated from the administrative function. 
30 Once a consumer has decided to make a purchase from the merchant, 
the application requests a user name and wallet password, display 
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merchant and order information, request that a user select a payment 
instrument from the wallet, and display and capture order 
acknowledgement and digital reciept. Basically for a payment 
instrument you can utilize any instrument that is evidence of 
5 membership, identity, certification or authority. For example, a card 
for video membership could be utilized to check out videos 
electronically via the internet. 



Transactions Supported 

1 0 The application in accordance with a preferred embodiment is able to 
originate sales and refund transactions types. It also provides 
automatic fill-in of addresses based on a user preferences file, and if 
no information is specified when a transaction is initiated, the 
information from the last payment transaction is utilized as default 

15 information. 

Shopping Support (shopping companion) 

The application in accordance with a preferred embodiment also 
shares payment and shipping information with the merchant and 
20 URLs from merchants which a consumer has frequented before 
linkage for visitation. 

Administrative Functions 

To simplify use of the application, actual payment and administrative 
25 functions are separated. Users are not presented with administration 
information while trying to complete an on-line payment process. 
Therefore the following administrative functions are supported: 
Data Management 

Data is automatically backed up to disk on a periodic basis based on 
30 user requirements. A user can view the contents of a backup in 
various ways. For example, a user can restore selected data from a 
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backup, everything stored, selected user information only, or 
everything except payment history information. Data export is also 
supported for selected digital receipts or order acknowledgements for 
email or to print for dispute resolution with a bank or other merchant. 
5 Data export is also provided to the following financial programs: 
Quicken, Microsoft Money and Managing your money. 

Receipt and Transaction History Management 

Receipt and transaction history management is also provided for 
10 viewing order history by time, payment instrument type, merchant 
and by completed, uncompleted or pending transaction. A purge 
order history transaction is also provided to purge the order history 
file by time or by payment instrument type. Another report is 
provided which shows digital receipts for orders placed including 
15 credit card number, expiration date, name, billing address and public 
key certificate. Order acknowledgements are also transmitted for 
every order that has been placed, and an export status tag is 
generated if an item has been exported to an external financial 
management program. 

20 

User Administration 

Various user administration transactions are also provided. They 
include a feature that creates an empty wallet for an user and sets a 
default password for the user when a new user is created. A delete 
25 user, change user password, and sign on as a user is also provided, 
but requires a user's password to activate. A view list of users is also 
provided and does not require a password to see the users defined to 
the system. 

30 

Wall t administration 
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Wallets are user specific and require the particular user to whom the 
wallet belongs to be effective. A preferred embodiment provides 
transactions for adding a new payment instrument, deleting a 
payment instrument, viewing a list of payment instruments and 
5 modifying a payment instrument. 

Loyalty Programs and Coupons 

Coupons are also accepted as well as other loyalty programs that a 
merchant might utilize, and provisions are provided for viewing loyalty 
10 program status and viewing existing coupons. 

Interoperability 

A preferred embodiment of the invention interoperates with many 
browsers and merchant systems. The requirements for 
15 interoperability across browsers and merchants applies to a base level 
functionality. 

Smart Card Integration 

Smartcard integration provides the consumer another payment 
20 method (stored value on a smartcard), portability of wallet information 
(key, payment instrument info, etc.). 

International Localization Requirements 

Support for localization to a particular country is built into the 
25 product for the major countries of the world. 

Figure 6 is a flowchart setting forth the detailed logic of a paywindow 
user interface in accordance with a preferred embodiment of the 
invention. Processing commences at function block 600 where an 
30 internet browser implemented as a Java applet detects the selection of 
a payment button and a test is performed at decision block 61 to 



WO 97/41540 PCT/US97/06938 

-41- 

determine if a wallet is open. If so, then the method of payment is 
determined at function block 630 and if a user cancels the processing, 
then control is returned to the Internet Browser at 632. If a user 
selects payment authorization at function block 634, then if the user 
5 can cancel authorization as shown at function block 650, accept 

payment authorization as shown at function block 640, or change the 
pay method as shown at 635 which results in a transfer of control to 
function block 630. If the wallet was not open when the test was 
performed at decision block 610, then the wallet is opened as shown 
10 at function block 620, and control is passed to the Administration 
Screen at 622 for processing consistent with the logic presented in 
Figure 7, or if the user cancels processing, then control is returned to 
the Internet Browser as shown at 624. 



1 5 Figure 7 is a flowchart of the detailed logic associated with the 

administration mode of the paywindow in accordance with a preferred 
embodiment. Processing commences at function block 700 when the 
application is desktop launched. A user is first exposed to the 
PayWindow 710 which has a number of selections available. If a user 

20 selects a wallet 720 then at function block 721, the wallet is opened 
and control is passed to function block 722 for a particular form of 
payment to be selected. Once the particular form of payment is 
selected at 724 or payment selection is cancelled at 726, then control 
is returned to the main paywindow at function block 710. However, if 

25 a user has selected to open a new wallet at function block 721, then 
control is passed to the administration function block 740 for further 
processing. 

If a user selects administration mode from the main paywindow 710, 
tO then another test is performed at decision block 732 to determine if 
the wallet is open. If the wallet is open, then control is passed to the 
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administration function block 740 for further processing. If a user 
selects register processing 712 from the main paywindow 710, then 
control is passed to the register function block detailed in Figure 8 at 
800. If a user selects reports processing, then control is passed to the 
5 reports function block 860 of Figure 8 for further processing. If a 
user selects backup / restore 716 then a backup or restore is 
performed utilizing the operating system tools in accordance with a 
preferred embodiment as described above. 

10 If the wallet is determined to not be open at decision block 732, then 
control is passed to function block 734 to open the wallet. After the 
wallet is open, then control is either passed to function block 736 to 
select payment, or if the user has cancelled the operation, control is 
passed to the main window 710 or if this is a new wallet, then control 

15 is passed to the administration function block 740. 

When control passes to the administration function block, then if the 
wallet tab is selected, then control passes to the administration wallet 
page at function block 750 and if a user is interested in browsing, 

20 then a file open dialog is initiated at function block 760, or if a 
request to remove the wallet from processing is received, then a 
remove confirmation dialog is initiated at function block 770. If a 
user is interested in changing the administration preferences, then 
control is passed to function block 780. If a payment administration 

25 processing is selected, then control is passed to the administration 
payment page as shown in function block 790 where a certificate can 
be installed as shown in function block 796, a confirmation dialog can 
be added at function block 794 or a remove confirmation dialog is 
processed at function block 792. When administration processing is 

30 completed, control is passed back to the main paywindow at function 
block 710. 
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Figure 8 is a flowchart of administration mode processing associated 
with register and report processing in accordance with a preferred 
embodiment. Processing commences at 800 where control is passed if 
5 an administrative register task is to be processed. The register 

function is parsed at function block 802 and if a detail function is to 
be processed, control is passed to function block 8S0 to determine if a 
hot link to a merchant site is desired. If so, then control is passed via 
852 to launch a browser and go to the merchant site at 856. If not, 
10 then control is passed via 858 back to the register function 802. If a 
find function is to be processed, then control is passed to function 
block 840 where a find operation is performed for a particular item 
844 or a find next operation is performed 842. 

15 When find processing is completed or cancelled 846, control is passed 
back to the main register screen. If a customize register processing is 
desired, then control is passed to function block 830 to customize the 
register. If a clear operation is required, then control is passed to 832 
to clear the register. When the customize operation is complete, then 

20 control is passed back to the main register processing; If a delete 
register operation is requested, then control is passed to function 
block 820 and a delete confirmation dialog is conducted at function 
block 822. Finally, if an output register operation is requested, then 
the register window is removed at 804, control is passed to function 
25 block 810 and a file open dialog is initiated at function block 812. 
When the dialog is completed, then control is returned to function 
block 802. 



30 



If a report button is pressed from the administration paywindow 
screen, then control is passed 860 to the reports function block 870 
to customize reports at function block 880, clear reports 882 or 
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output reports 872 which is accomplished via a file open dialog at 
function block 874. 



Pay Window 

5 Figure 9 is an illustration of a paywindow display in accordance with 
a preferred embodiment. The paywindow display 980 presents a list 
of available payment instrument holders in graphic form such as a 
purse bit image 900, or wallet bit image 910, 920 to a user once an 
appropriate password is entered via an entry point 930. A scroll bar 

10 922 is provided to allow the list of available payment methods to be 
scrolled, or selecting the up arrow 924 or the down arrow 926 can be 
used to review the available payment methods. In addition, there are 
areas provided at the bottom of the screen for opening 970, creating a 
new 960 wallet and cancelling 950 payment. The Cancel button 950 

15 invokes the display of the payment cancellation screen. Finally, a 
message area is provided at the bottom of the screen for 
communicating system messages 940. 

If a user presses the right or left mouse button the focus of the 
20 window is shifted accordingly. The tab key on the keyboard attached 
to the cpu is utilized to move and cycle the highlight between various 
controls on the display. If the enter key is pressed, the highlighted 
control is activated. For example, if the enter key is pressed after 
information is entered into the password field 930, then the password 
25 is checked with the password file to determine if a valid password has 
been entered. The wallet's listbox is a single selection listbox which 
displays all the wallets installed on the system. A user may utilize the 
mouse or keyboard to select a wallet to open. The New button 960 
creates a new wallet file and displays the 'Administration' dialog for 
30 wallet information entry. 
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Payment Instrum nt 

Figure 10 illustrates a list of payment instruments represented as bit 
mapped images for a user to select from in accordance with a 
preferred embodiment. The payment instruments include a credit 
5 card, debit card, smart card, ecash, micropayments and electronic 
checks. The open button 970 invokes the payment instrument 
screen. By clicking on the Select button 1000, control is transferred to 
an authorization screen where the details of the order are displayed. 
The payment instruments represented in Figure 10 include a Bank 
10 Americard Visa 1040 with a graphical image that is virtually identical 
to the user's actual card, so such information as payment instrument 
holder's name, instrument name, membership period and expiration 
date. Such images can be obtained by scanning the user's cards or 
utilizing the manufacturer's template and adding text representative of 
15 the user's name. A Chevron checking account 1020 is also provided 
with an enlarged Chevron logo to represent the user's checking 
account which is another type of payment instrument that is 
supported in a preferred embodiment. A Wells Fargo Visa 1030 
payment instrument is also provided in accordance with a preferred 
20 embodiment. Whereas realistic representations of actual visa cards 
are represented in Figure 10, one of ordinary skill in the art will 
readily appreciate that other, user-defined graphic or text information 
can be utilized to represent the payment instruments. Pressing the 
Cancel button 1010 goes back to the Payment Cancellation screen. 
25 Choosing Bob's wallet 1050 goes back to the open wallet display 
screen to enter Bob's wallet password 930. Double clicking on any 
payment instrument takes you to an authorization screen for that 
particular payment instrument. Clicking on a payment instrument 
icon puts a border around it, indicating it has been selected. An 
30 example of the border is shown for Jane's purse 1060 and the graphic 
associated with Jane's purse has an indicia of the open state which is 
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a graphic in an open position as shown at 1060. Similarly, if a wallet 
is selected, such as Bob's Wallet 1050, the graphic associated with 
the wallet could be represented with an indicia of openess, such as a 
changed color, or a graphic that portrays an open wallet. 

5 

Source code in accordance with a preferred embodiment is provided 
below as another form of detailed logic disclosure. The 
WalletBrowserPanel class displays the wallets and the payment 
instruments contained in it. It utilizes the PasswordEntryPanel, 

10 ImageSelectorPanel and the Imageltem classes. The 

PasswordEntryPanel class accepts the password for a given wallet 
from the user. The ImageSelectorPanel class displays the wallet icons 
and the payment instrument icons and allows the user to 
select/ deselect an wallet or instrument. Displaying of an icon on the 

1 5 screen is managed by the Imageltem class. 



import java.awt.*; 
import java.net.*; 
20 import j ava . ut il . * ; 

public class WalletBrowserPanel extends Panel { 

private PayWindow payWindow; 

private WalletManager walletManager; 

private ImageSelectorPanel walletPanel, inst rument Panel ; 
25 private Button btnOK, btnCancel; 

private Panel buttonPanel, walletDetail ; 
private PasswordEntryPanel passwordEntryPanel; 

private Insets insets « new Insets (15, 15, 15, 15); 
30 private ImageltemRef openWal let Image I tern = null; 

public WalletBrowserPanel (PayWindow pw) { 

payWindow = pw; 

35 walletManager « WalletManager .getWalletManager () ; 

btnOK o new Button ( "Open") ; 
btnCancel = new Button ("Cancel") ; 
buttonPanel = new Panel { ) ; 

buttonPanel . setLayout (new FlowLayout ( FlowLayout . CENTER , 



40 15, 10)) 



buttonPanel . add (btnOK) ; 
buttonPanel . add (btnCancel ) ; 

instrumentPanel » new ImageSelectorPanel {false, null) ; 
walletPanel = new ImageSelectorPanel (false , null); 
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Enumeration walletNames = walletManager .getWalletNames () / 
String name; 
Wallet wallet; 

while ( walletNames. hasMoreElements () ) { 
5 name = (String) walletNames . nextElement ( ) ; 

wallet = walletManager. getWallet (name) ; 
try { 

walletPanel . addlmage (name , new 

URL (walletManager . get ImageDir ( ) + 
10 wallet. getCloseBitmapO ) , wallet); 

} catch (Exception e) { 

System. out. print In (e) ; 

} 

} 

15 passwordEntryPanel = new PasswordEntryPanel (this) ; 

passwordEntryPanel.setPanelSize(new Dimension (3 75 , 290)); 

walletDetail = new Panel (); 

walletDetail . setLayout (new CardLayout ( ) ) ; 

walletDetail . add ( "PasswordEntryPanel " , 
20 passwordEntryPanel); 

walletDetail . add ( "InstrumentSelection" , ins trument Panel) ; 

setLayout (new BorderLayout ( ) ) ; 

add ( " South" , buttonPanel ) ; 

add("West" , walletPanel); 
25 add( "Center", walletDetail); 

walletNames = walletManager . getWalletNames 0 ; 

name = (String) walletNames . nextElement () ; 

passwordEntryPanel . setWallet (name) ; 

displayOpenWallet 0 ; 

30 } 

public void openNewWallet () { 
// ImageltemRef imageltemRef = walletPanel. 

// getSelectedltemO ; 

// passwordEntryPanel. setWallet (imageltemRef .getNameO ) ; 

35 // btnOK.setLabel("Open") ; 

// ( ( CardLayout ) walietDetail .getLayout 0 ) . 

/ / show (walletDetail , "PasswordEntryPanel " ) ; 

// payWindow.setTitle("PayWindow - Open Wallet"); 

displayOpenWallet ( ) ; 

40 } 

public void ge t Payment Ins t rument () { 

ImageltemRef imageltemRef = walletPanel . 

getSelectedltemO ; 
Wallet openWallet = pay Window. getOpenWal let () ; 
45 Wallet selectedWallet = 

(Wallet) imageltemRef .getUserObject () ; 

if ({selectedWallet != null) (openWallet »= null) && 
openWallet. equals (selectedWallet) ) { 
// btnOK.setLabel ("Select") ; 

50 // ( (CardLayout) walletDetail .getLayout () ) . 

// show (walletDetail, "InstrumentSelection") ; 

// 
// 

Method") ; 

55 displayChoosePaymentMethod ( ) ; 



payWindow.setTitle ("PayWindow - Choose Payment 



} 

else { 
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displayOpenWallet ( ) ; 

} 

} 

public void disableOpenButton () { 
5 btnOK. disable () ; 

} 

public void enableOpenButton {) { 
btnOK. enable {) ; 

} 

10 public void newWallet (Wallet wallet) { 

System. out .println < "Wallet Browser - newWallet"); 
try { 

walletPanel . addlmage (wallet . getName ( ) , 

new URMwalletManager .getlmageDir () + 
1 5 wallet . getCloseBitmap ( ) ) , 

wallet) ; 
} catch (Exception e) { 

System. out- println (e) ; 

} 

20 } 

public Insets insets () { 

return insets; 

} 

25 public boolean handleEvent (Event evt) { 

if (evt. target bs instrument Panel) { 
if (evt. id 

30 ImageSelectorPanel . EVENT_IMAGEDOUBLE CLICK) { 

Payment Instrument instrument; 



( Imagel temRef ) evt . arg ; 



ImageltemRef imageltemRef 



instrument = (Payment Instrument) 
35 imageltemRef .getUserObject () ; 

pa yWindow. author izePayment (instrument) ; 

} 

} 

else 

40 if (evt. target == walletPanel) { 

if (evt. id == 
ImageSelectorPanel . EVENT_IMAGESELECTION) { 

45 ImageltemRef imageltemRef = 

(ImageltemRef ) evt .arg; 

Wallet wallet = 
(Wallet) imageltemRef .getUserObject () ; 

if (wallet payWindow.getOpenWallet () && 
50 pay Window. is PaymentRe quest () ) { 

// btnOK.se tLabel ("Select") ; 

// ( (CardLayout) walletDetail .getLayout 0 ) . 

// show (walletDetail , 

"InstrumentSelection") ; 
55 // payWindow.setTitle("PayWindow - Choose 

Payment 

Method" ) ; 
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displayChoosePaymentMethod ( ) ; 

} 

else { 

// 

5 pa sswordEn try Panel. setWallet ( image I temRef .getName ( ) ) ; 

// btnOK. setLabel ( "Open" ) ; 

// { (CardLayout) walletDetail .getLayout () ) 

// show (walletDetail , 

"PasswordEntryPanel* 1 ) ; 
10 // payWindow. setTitle ( "PayWindow-Open 



Wallet") ; 

) 

15 } 

else 



30 



50 



) 



displayOpenWallet () ; 



if (evt. target «= btnOK) { 

if (evt. id « Event . ACTION_EVENT) { 

if (btnOK.getLabel () "Open") { 
20 System. out . print In ("Open") ; 

ImageltemRef imageltem = walletPanel. 

getSelectedltemO ; 
Wallet selectedWallet * 

25 (Wallet) imageltem.getUserObject () ; 



// validate the password 
// close any open other open wallet 
if (openWalletlmageltem != null) { 

Wallet prevOpenWallet = (Wallet) 

openWallet Imageltem. getUserOb j ect () ; 

prevOpenWallet . close ( ) ; 

35 try { 

walletPanel . changelmage (openWalletlmageltem, 

new 

URL(walletManager.getImageDir() + 

40 

prevOpenWallet .getCloseBitmap ( ) ) ) ; 

} catch (Exception e) { 

System.out .println(e) ; 

> 1 

// open selected wallet 



walletManager .openWallet (selectedWallet .getName ( ) , » " ) ; 

payWindow. setOpenWallet (selectedWallet) ; 

openWalletlmageltem = imageltem; 
// display open wallet icon 
try { 



55 walletPanel . changelmage (imageltem, 

URL (walletManager .getlmageDir ( ) + 



new 
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selectedWallet.getOpenBitmapO ) ) ; 

} catch (Exception e) { 

System. out .println(e) ; 

} 

// get instruments 

instrumentPanel . removeAll Elements ( ) ; 
Enumeration instrumentNames ■ 

selectedWallet.getlnstruments () ; 
Payment Instrument instrument; 
String name; 

while { instrumentNames . hasMoreElements ( ) ) { 

name = 

(String) instrumentNames . nextElement ( ) ; 

instrument = 

selectedWallet . getlnstrument (name) ; 

try { 

instrumentPanel . add Image (name , 

new 

URL (walletManager .getlmageDir () + 

25 instrument . getBitmap ( ) ) , instrument ) ; 

} catch (Exception e) { 

System. out .println (e) ; 

} 

} 

if ( pay Window. isPaymentReguest (} ) { 
// display instruments 
// btnOK.setLabel ("Select") ; 

// 

( (CardLayout) walletDetail .getLayout ( ) ) . 
35 // show (walletDetail . 

" Instrument Select ion" ) ; 

displayChoosePaymentMethodO ; 

} 

else { 

40 payWindow . showMenu ( ) ; 

} 

} 

else 

if (btnOK.getLabel () "Select") { 
45 Paymentlnstrument instrument; 

ImageltemRef imageltemRef * 
instrumentPanel . getSelectedl tern ( ) ; 

instrument = (Paymentlnstrument) 

imageltemRef .getUserObject 0 ; 
50 payWindow. author izePayment (instrument) ; 

} 

} 

} 

else 

55 if (evt. target btnCancel) { 



if (payWindow. isPaymentReguest ( ) ) { 
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payWindow. cancelTransaction ( ) ; 

else { 

payWindow. showMenu ( > ; 

5 } 
} 

return super. handle Even t (evt) ; 

} 

public void paint (Graphics g) 
10 { 

g.drawLine (insets. left, sizeO . height- insets . bottom, 
sizeO .width- insets. right, sizeO .height- 
insets, bottom) ; 

g . drawLine ( insets . left , size ( ) . height - insets . bottom+l , 
sizeO .width- insets. right, sizeO . height- 
insets, bottom+l) ; 

} 

private void displayOpenWallet ( ) { 

ImageltemRef imageltemRef = walletPanel . 
20 getSelectedltemO ; 

passwordEntryPanel . setWallet ( imageltemRef . getName ( ) ) ; 

btnOK.se tLabel ("Open") ; 

( (CardLayout) walletDetail .getLayout () ) . 

show (walletDetail, "PasswordEntryPanel") ; 
25 payWindow. setTitle(" PayWindow - Open Wallet"); 

private void displayChoosePaymentMethod () { 
btnOK.setLabel ("Select") ; 
btnOK. enable () ,• 

( (CardLayout ) walletDetail . getLayout ( ) ) . 

show (walletDetail, "InstrumentSelection" ) ; 
payWindow. setTitle ("PayWindow - Choose Payment Method"); 



30 



35 



} 



45 



class PasswordEntryPanel extends Panel { 
private Image panellmage; 
private TextField password; 
40 // private URL imageFileURL; 

private Dimension panelSize; 
private Label enterPasswordLabel ; 
private Label walletNameLabel; 
private WalletBrowserPanel wall etBrowser Panel ; 
public PasswordEntryPanel (WalletBrowserPanel wbp) { 



. WalletBrowserPanel « wbp; 

ImageLoader imageLoader = new ImageLoader (this) ; 
- A WalletManager wm * WalletManager .getwalletManager ( ) • 

5V try { 

imageFileURL = new 

// 

URL ( "Pile : //e : /htdocs/PayWindow/JavaDemoDev/images/open .wallet . backer 
ound.gif") ; " ' 

55 // 

URL ( "http : //kimberly/PayWindow/JavaDemoDev/images/open . wallet .backgro 
und.gif ") ; 
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} catch (Exception e) 

System. out. println (e) ; 
// panellmage. = imageLoader .Loadlmage {image FileURL) ; 

panellmage = imageLoader . Loadlmage (wm. get PwdScr Image ()) / 
5 panelSize = new Dimension (panellmage. getwidth (this) , 

panellmage .getHeight (this) ) ; 
enterPasswordLabel o new Label ("Enter the Password for", 
Label. CENTER) ; 

walletNameLabel = new Label (" " , Label . CENTER) ; 
10 password = new TextFieldO; 

password. setEchoCharacter (•*'); 
setLayout (null) ; 
add (password) ; 
add (enterPasswordLabel) ; 
15 add (walletNameLabel) ; 

public void setWallet (String walletName) { 

walletNameLabel . setText (walletName+" : " ) ; 
password . setText ( " n ) ; 
20 walletBrowserPanel . disableOpenButton ( ) ; 

} 

public void setPanelSize (Dimension size) { 
panelSize * size; 

25 public String getPasswordO { 

return password.getText {) ; 

} 



30 



public Dimension minimumSize ( ) { 
return preferredSizeO ; 

} 

public Dimension preferredSizeO { 

35 return panelSize; 

} 

public boolean handleEvent (Event evt) { 

if (evt. target password) { 
40 if (evt. id Event . KEY_RELEASE) { 



if (password.getText () .length () «= 0) { 

walletBrowserPanel . disableOpenButton ( ) 



45 } 

else { 



walletBrowserPanel .enableOpenButton ( ) ; 
} 



} 

50 } 

return super . handleEvent ( evt ) ; 

public void update (Graphics g) { 

55 paint (g); 

} 

public void paint (Graphics g) { 
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// gldrawlmage{ panel Image, 0, 0, size {) .width, 

sizeO .height, this) ; 

g . drawlraage (panel Image , 
5 (size (). width - panel Image .getwidth (this) ) /2 , 

(size 0 .height - panel Image. getHeight (this) ) /2, 
this) ; 
int label Width; 

PontMetrics fontMetrics ■ g . getFontMetrics () ; 
10 labelWidth = fontMetrics . stringWidth ( 

enterPasswordLabel .getText () ) + se- 
en ter Pass wordLabel . reshape ( (size () .width - labelWidth) /2 , 

(sizeO .height/2) - 30, labelWidth, 20); 
labelWidth = fontMetrics . stringWidth ( 
15 walletNameLabel .getText () ) + 60; 

walletNameLabel . reshape ( (size ( ) . width - labelWidth) /2 , 

(sizeO .height/2) - 10, labelWidth, 20); 
password. reshape ( (size () .width - 100) /2, 
(size () .height/2) + 10, 
20 100, 20) ; 

g.drawRect (0, 0, size () . width-1, size {) .height- 1) ; 

} 

} 



25 Authorization 

Figure 11 is an authorization display screen in accordance with a 
preferred embodiment. The authorization screen displays the 
transaction details and facilitates a user's examination of all the 
details of a particular transaction. It also allows a user to accept or 

30 cancel a transaction, or change the payment method for a particular 
transaction. The payment button on a web page launches this screen 
when a wallet is already open. The change payment method 1100 
displays the Payment Instrument screen to allow a user to choose a 
different payment instrument and transfers control to the paywindow 

35 display shown in Figure 9. The Order tab 1110 controls the display of 
pages of information about the transaction on order, merchant or 
address. Pressing the accept button 1140 signals the user's 
acceptance of the transaction, and it records the transaction data into 
the wallet's register and displays a PAID receipt as shown at 1200 at 

40 Figure 12. Pressing the Cancel button 1150 displays the payment 
cancellation screen as shown in Figure 13 at 130 . 
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PayWind w Main 

Figure 14 illustrates a Main screen in accordance with a preferred 
embodiment of the invention. This screen is displayed when a user 
5 runs an application in the local mode and indicates that the 

paywindow is operating in administration mode. The application 
launches from the desktop. The screen controls include a button for 
selecting wallet 1401 which displays the paywindow screen and 
allows a user to open or create a new wallet. Another button, the 

10 report button 1410 opens an instance of the report window when it is 
selected. Selecting the register button 1420 opens the register 
window which allows a user to select from a variety of register 
transactions. Selection of the administration button 1430 opens the 
administration screen which allows a user to perform various 

15 administrative tasks. If a user selects the backup/ restore button 

1450, then the backup/ restore dialog is initiated. Finally, selection of 
the exit button 1460 closes the screen and terminates the application. 

Administration 

Figure 15 is an illustration of an Administration display screen in 
20 accordance with a preferred embodiment. This is the main screen for 
entering information pertinent to wallets, payment methods and user 
preference settings into the system. The information is organized and 
presented in pages of grouped data. The Administration display is 
launched from the Administration button 1430 of Figure 14 in 
25 response to selection of the button by a user. The wallet tab 1510 

controls management of pages of related information pertaining to the 
currently active wallet. Users can utilize the mouse or the keyboard to 
modify the pages of information. The done button 1590 saves the new 
information in the wallet when it is selected. The cancel button 1595 
30 discards the changes and closes the display screen when it is selected. 
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Figure 16 illustrates a display of the administration wallet page in 
accordance with a preferred embodiment. The user must enter the 
name of the wallet into the entry field 1660, the wallet's owner must 
be entered at 1670, a password corresponding to the named wallet 
5 must be entered at 1675 the password entry is displayed with a * n 
characters entered in place of the letters and numbers of the 
password, and a confirm password must be entered at entry field 
1678. This confirm password 1678 must match the password 
entered at 1675. The browse button 1680 opens the file open dialog 
10 to present a user with a list of wallets to choose from using a wallet 
icon file as input to the process. The remove wallet button 1685 
removes the current wallet from the system and displays a 
confirmation message box prior to deletion. 

The administration payment tab 1520 of Figure 15 initiates a screen 
15 as illustrated in Figure 17. Figure 17 is a payment administration 
window in accordance with a preferred embodiment. A user may use 
payment page of the administration screen to view or edit a payment 
method's information. 

20 The listbox control 1710 displays all the payment methods currently 
installed in this wallet. A user can scroll the listbox control to see all 
of the payment methods available to the owner 1760. The user must 
select a payment method prior to viewing its information. The 
selection is accomplished by positioning the cursor over a payment 

25 method that the user requires and clicking the mouse button or 

pressing the enter key to select that card as the method for payment. 
The card name edit field 1750 is used to display or edit the name 
that the system utilizes to refer to the currently selected method for 
payment. The card type data entry field 1760 corresponds to the 

30 various types of methods for payment. Many of the types are 
predefined for a user, such as: master card, visa, discover. 
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An associated card number entry field 1780 is also provided to display 
and/or edit the card number. An entry field 1782 is also provided for 
display and /or edit of the card's expiration date. A certificate dialog 
5 box 1784 button is also provided for initiating the attachment or 
editing of a certificate. A checkbox control 1792 is also provided if a 
user desires to make the selected card the default method for payment 
for a particular wallet. This is an attractive feature since it eliminates 
selection of a particular method of payment each time a wallet is 

10 opened. The ergonomics are well thought out to parallel a user's 
wallet in which the favorite credit card is usually stored in a 
convenient location for ready retrieval when the holder of payment 
methods (ie., wallet, purse, brief case, smart card) is selected. Two 
other buttons are provided for adding 1786 and removing 1790 a 

15 payment method to /from the holder of payment methods. The 
removal button 1790 displays a confirmation message prior to 
removal of the payment method. A button to signify completion of 
processing 1742 and a button for cancelling processing 1746 are also 
provided. 

20 

Figure 18 is an illustration of the administration preferences page in 
accordance with a preferred embodiment. The address line one edit 
control 18 lO is used to view or edit the first shipment address line for 
a particular user. The address line two edit control 1820 is used to 

25 view or edit the second shipment address line for a particular user. 
The city edit control 1830 is used to edit or view the shipment city for 
a particular user. The state edit control 1850 is used to edit or view 
the shipment state for a particular user. The zip code edit control 
1860 is used to edit or view the shipment zip for a particular user. 

30 The country edit control 1840 is used to edit or view the shipment 
country for a particular user. A button to signify completion of 
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processing 1870 and a button for cancelling processing 1880 are also 
provided. 

Figure 19 illustrates the window controls in accordance with a 
5 preferred embodiment. The name of the active window is always 

displayed in the upper left hand corner 1930 for easy recognition by a 
user. The upper right hand corner has three buttons for minimizing 
the display 1900, maximizing the display 1910 and closing a display 
1920. One of ordinary skill in the art will readily comprehend that 
1 0 other windowing display tools could be substituted for the tools 
described without undue experimentation. A touch display screen 
could also be substituted for environments where a mouse or 
keyboard might not be appopriate. One could even envision the 
displays being manipulated using a remote control device (infrared) 
1 5 that interfaces with a television set for viewing, selecting and paying 
for purchases from the comfort of a living room or easy chair. 



Figure 20 is a register display in accordance with a preferred 
embodiment of the invention. The register display lists all 

20 transactions in chronological order and allows a user to navigate 

through and examiner transactions associated with a wallet. A user 
also has the option of searching for particular transactions and 
examining detailed transaction information for any transaction. 
Finally a user can reconcile transactions against a bank statement as 

25 well as a shipment list of merchandise. This display is initiated by 
selecting the register button from the administration screen. A user 
may only create a single instance of the register display, so additional 
clicks of the mouse button is only be utilized to set the focus to the 
single register display window. Clicking on an item displayed on the 
30 register display sets the selection highlight to the hit record associated 
with the area the cursor is currently displayed. Double clicking brings 
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up additional detail on the currently selected record. 

If the user presses the tab key, the cursor moves to and highlights the 
next control on the display. If the user presses the enter key, the 
5 highlighted button is invoked on the register display. When a 

transaction record is highlighted, pressing the up arrow key moves the 
highlight (selected item) to the preceding record. When a transaction 
record is highlighted, pressing the down arrow moves the highlight 
(selected area) to the next record. Selecting the home key sets the 

10 highlight to the first record in the register report, and similarly, 
pressing the end key sets the highlight to the last record in the • 
register report. Selecting the detail button 2010 on the register 
display opens the register detail dialog. Selecting the find button 
2020 opens the register find dialog. Selecting the customize button 

1 5 2030 opens the register customize dialog. Once a user has 

customized a particular register, then the customize button 2030 
displays a colored dot symbol to indicate an active filter is defined. _ If 
the delete button 2040 is selected, then the highlighted register is 
deleted after an appropriate confirmation message box is displayed 

20 and selected in the affirmative. Moreover, selection of the output 

button 2050, opens the output dialog with a user. Finally, selection 
of the close button 2060 closes the register screen. A scroll bar 2090 
is also provided to allow a user to scroll through records extending 
over a single page. For each record, a date 2080, a time 2082, a 

25 payment instrument 2084, an item 2086, an amount 2088, a paid 
2070 and a received 2072 entry is provided in a columnar 
representation. The paid 2070 and received 2072 allow a user to 
check/ reconcile a record when paying the credit card payment. 

30 Figure 21 is register detail display in accordance with a preferred 
embodiment. The register detail display allows a user to view or 
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examine all of the specific details of a transaction. The display is 
launched when a user double clicks on a highlighted transaction 
record, or when a user presses the detail 2030 button as illustrated in 
Figure 20 of the register display. The order tab 2100 control selects 
5 an information page on the display. The Go To Merchant Site button 
2110 button spawns the internet browser and sets it to the merchant 
web page. The ShipToAddress 2120 provides a link to the address 
information for the selected merchant. The memo 2150 edit control is 
used to view/edit a short memo text for each transaction. The paid 
10 2170 checkbox allows a user to check/ reconcile a record when he or 
she pays the credit card payment. The received 2 160 checkbox allows 
a user to check/reconcile the record when he/she receives the 
merchandise. The done 2140 closes the 'Register Detail' dialog and 
returns the focus to the register. 

15 

Register Find 

Figure 22 is a register find display in accordance with a preferred 
embodiment. A user utilizes this display to search for a transaction - 
record. The find button 2020 of the register display as described with 
20 reference to Figure 20 is used to initiate this display. The from date 
2200 control is used to enter the starting date of a transaction. The 
to date 2210 control is used to enter the ending date of the 
transaction. The combobox 2220 is used to list all of the payment 
methods in the wallet. A pulldown 2225 control causes a list of 
25 payment methods to be displayed to the user. The item 2230 control 
is used to enter a full or substring of the target item of the search. 
The merchant combo 2240 display lists all of the merchant names in 
the wallet. The item 2250 control causes a list of all the merchant 
names to be displayed for selection of the particular merchant name 
required. The memo 2265 edit control is used to enter the full or 
substring of the memo to search for. The cancel 2295 button cancels 



30 
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and closes the register find dialog. The find 2295 button starts the 
search command. The find dialog remains open during the search 
and the search result in the register is highlighted. The search up 
2260 button and down 2270 button direct the direction of the find 
5 operation. The find next 2280 button continues the search to locate 
the next register record. 

Figure 23 is a register customize display in accordance with a 
preferred embodiment. The display facilitates a dialog which allows a 

10 user to create a record filter for transaction records. It provides 
functionality to save, recall and remove filters. Saved filters are 
shared between the register and report functions of the paywindow in 
accordance with a preferred embodiment. To initiate this display, a 
user selects the customize button 2030 of the register screen. The 

15 from date 2340 entry field allows a user to enter a starting date to 

show the records after this date. The to date 2350 entry field allows a 
user to enter an ending date to show the records up to and including 
this date. The item 2360 entry field allows a user to enter a full or 
substring of the item field as a filter parameter. The received 2365 

20 button allows a user to select a 'received' flag as a filter parameter. 
The paid 2370 button allows a user to select a 'paid' flag as a filter 
parameter. The memo field 2380 allows a user to enter a full or 
substring of the memo field as a filter parameter. A user may select 
one or more payment methods as a filter parameter utilizing the paid 

25 by 2395 box. This multi-selection listbox displays all the payment 
methods in the wallet for a user to choose from. The merchant box 
2397 allows a user to select one or more merchants as a filter 
parameter. This multiselection listbox displays all of the merchant 
names in the transaction register for a user to select from. The filters 

30 2310 allow a user to name, store and retrieve filters by using the 
combobox and selecting, or entering a stored filter name. The 
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memorize 2320 button assigns the name appearing in the filter 2310 
box to the parameters specified on the display. The remove 2330 
button allows a user to select a filter using the combobox, and delete 
it. The clear 2385 button allows a user to clear all of the filter 
5 parameters. The ok 2390 button activates a filter and closes the 
customize dialog. The customize button of the register displays a dot 
indicating an active filter. 

Figure 24 is a register output display for directing the output target 
10 for register information. For example, a user may select a printer or a 
file as the target for outputting the results of a register display. The 
output display is invoked by pressing the output button of a register 
display. The user clicks the printer button 2400 to initiate output of 
register display information to the printer. A user selects the export 
15 button 2410 to output the register information to a file in a file format 
selected form the type 2420 combobox. The user specifies a 
path/name for the output file in text entry field 2430. A user may 
open the file save dialog by selecting the browse 2435 button and 
setting the output file path and file name. The cancel 2450 buton 
20 cancels the operation and closes the dialog display. The ok 2460 
button closes the dialog and starts the output of the register screen. 



Report 

Figure 25 is a report of a wallet in accordance with a preferred 
25 embodiment. The display is a pre-formatted report for use in 

customizing a report. A user invokes the report by pressing a button 
of the paywindow display. The customize button 2500 opens the 
register customize dialog. If a colored dot appears inthe customize 
button 2500, then a filter is currently active. The output button 2510 
30 opens the output dialog. The done 2520 button closes the report 
window. The report type listbox 2530 allows a user to select a pre- 
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formatted report type by using the report type combobox. The user 
can also select any of the fields 2540, 2550, 2560, 2570, 2580 or 
2590 to set the report sort field. The selected sort field appears as 
boldface in the sort field. 

5 

Report Customize 

Figure 26 illustrates a report customize display in accordance with a 
preferred embodiment. The screen allows a user to create a record 
filter for transaction records. It provides functionality to save, recall 

10 and remove filter(s). Saved filters are shared between the Register and 
Report functions of the PayWindow. To initiate this display, a user 
selects the customize button of the report screen. The from date 2692 
entry field allows a user to enter a starting date to show the records 
after this date. The to date 2694 entry field allows a user to enter an 

15 ending date to show the records up to and including this date. The 
item 2690 entry field allows a user to enter a full or substring of the 
item field as a filter parameter. The received 2684 button allows a 
user to select a 'received' flag as a filter parameter. The paid 2682 
button allows a user to select a 'paid* flag as a filter parameter. The 

20 memo field 2680 allows a use v r to enter a full or substring of the memo 
field as a filter parameter. A user may select one or more payment 
methods as a filter parameter utilizing the paid by 2630 box. This 
multi-selection listbox displays all the payment methods in the wallet 
for a user to choose from. The merchant box 2640 allows a user to 

25 select one or more merchants as a filter parameter. This 

multiselection listbox displays all of the merchant names in the report 
for a user to select from. The filters 2600 allow a user to name, store 
and retrieve filters by using the combobox and selecting, or entering a 
stored filter name. The memorize 2610 button assigns the name 

30 appearing in the filter 2610 box to the parameters specified on the 

display. The remove 262 button allows a user to select a filter using 
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the combobox, and delete it. The report header 2660 entry field 
allows a user to enter information for display as a title for the report. 
The clear 2670 button allows a user to clear all of the filter 
parameters. The ok 2650 button activates a filter and closes the 
5 customize dialog. The customize button of the report displays a dot 
indicating an active filter. 

Report Output 

Figure 27 is a report output display in accordance with a preferred 
embodiment. A user can select the output target utilizing this dialog. 

10 This display is invoked by selecting the output button 2510 of the 
report display. A user may select a target of choice using this dialog. 
A user selects the printer 2710 checkbox if the ouput from the report 
is targetted for a printer. This action disables all controls under the 
export button. A user selects the export button 2720 to output the 

15 report to an export file. This action enables all export button controls. 
A user selects a file format for the export operation file utilizing the 
pull down menu 2730. A user selects a path/file name for the output 
file using the path data entry field 2740. The browse button 2750 
allows a user to open a file save dialog to browse and set the file path 
20 or file name. The cancel button 2770 cancels the operation and 

closes the dialog. The ok button 2760 closes the dialog and starts the 
output process. 

In an alternative embodiment fo the Register and Report functions 
25 described above, a separate financial application program, such as 
Quicken, could be utilized as a helper application with the internet 
program. This feature would have the additional advantage of 
allowing seamless reporting with other financial transactions bundled 
with the Quicken application. Another alternative embodiment could 
30 utilize JPEG format or GIF formatted files for storing and retrieving 
image files as a compression alternative. These standards are well 
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known in the industry and proven effective for reducing the amount of 
storage that is necessary for saving graphic files and bit-mapped 
images. 



Payment Instrument Holders 

Figure 28 illustrates various payment instrument holders in 
accordance with a preferred embodiment. A moneyclip is shown at 
2800 and 2802. Various wallets are shown in the closed position at 

10 2810, 2814, 2830 and 2850; and in the open position at 2812, 

2816, 2840 and 2860. A purse in the closed position is depicted at 
2820 and in the open position at 2822. Finally, a smartcard is shown 
in the closed position at 2870 and in the open position at 2880. One 
of ordinary skill in the art will recognize that the depictions are 

15 representations of bit mapped images that could be stored as JPEG, 
GIF or other representations to conserve space. 

Certificate Processing 

A payment instrument must be certified by a "certificate issuing 
20 authority" before it can be used on a computer network. In the case of 
credit card payments, the issuer may be one of the card issuing 
banks, but it might also be a merchant (eg SEARS), a transaction 
aquiring bank or an association such as VISA or Mastercard. 

25 Payment instrument information is stored in the consumer's wallet. 
The certificate which authorizes the payment instrument will be 
stored along with that data in a secured database. The process of 
acquiring a certificate is described below. A certificate can be 
delivered to a consumer in a preconfigured wallet. The consumer 

30 receives a wallet which contains the certificate together with the 

necessary details associated with a payment instrument including a 
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payment instrument bitmap which is authorized by a certificate 
issuing authority or the agencies represented by the issuing authority. 

5 Obtaining a certificate 

A consumer will deliver or cause to be delivered information to a 
certificate issuing authority. Figure 29 is an illustration of a 
certificate issuance form in accordance with a preferred embodiment. 
A user may fill out the form on-line, on paper and mail it in, or get his 

10 bank or credit card company to deliver it. The consumer delivered 
data will usually contain a public key belonging to a security key pair 
generated by consumer software. This information will normally be 
mailed to the consumer's address and actuated by a telephone call 
from the consumer. The certificate authority takes this information 

15 and uses it to validate that he is indeed entitled to use the payment 
method. This processing normally takes a few days to accomplish. 
Information will normally be exchanged with the organization issuing 
the payment method in the physical space if there is one, and with 
credit agencies. The certificate information is loaded into the 
20 consumer's software to enable payment processing to proceed online. 

In some cases the consumer will be able to select details about a 
payment instument holder (wallet) he desires to own. This may be the 
icon representing a holder, the access password or other information. 

25 After creating the certificate, the issuing authority can use information 
received in the certificate application to create a custom payment 
instrument holder ready to use. This payment instrument holder will 
contain the following information. Payment instrument information 
including card number 2900 and expiration date 2902. Personal 

30 information including name 2904, address 2906, social security 
number 2908 and date of birth 2910. 
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The associated certificate ( eg X509 standard ), an associated public 
key or in some cases public/ private key pair ( eg RSA), and an 
approved bitmap representing the payment instrument are provided to 
5 the requesting consumer. Figure 30 illustrates a certificate issuance 
response in accordance with a preferred embodiment. An approved 
bitmap for a VISA card is shown at 3000. Also a default payment 
holder 3010 and a default payment holder name are provided with the 
certificate issuance. After the consumer aquires the payment 

10 instrument holder 3010, the payment instrument holder is 

immediately visible to him in his collection of payment instrument 
holders. Figure 31 illustrates a collection of payment instrument 
holders in accordance with a preferred embodiment. The predefined 
payment instrument holder 3100 is the same JOHN's WALLET that 

15 was predefined based on defaults by the certificate issuance form. 
Figure 32 illustrates the default payment instrument bitmap 3200 
associated with the predefined payment instrument holder 3210 
resulting from the consumer filling in and obtaining approval for a 
VISA card. 

20 

Figure 33 illustrates a selected payment instrument with a fill in the 
blanks for the cardholder in accordance with a preferred embodiment. 
Next time the payment instrument holder is opened in a payment 
context the certificate issuing authorty's approved instrument bitmap 
25 can be used to select the payment instrument and utilize it to make 
purchases. Figure 34 illustrates a coffee purchase utilizing the newly 
defined VISA card in accordance with a preferred embodiment of the 
invention. 
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CLAIMS 

-What is claimed is: 

1 • A method for initiating authorization in a computer with an 

attached display (138, 400) connected to a network for receiving 
and transmitting network information (1 10, 430), comprising 

4 the steps of: 

5 (a) displaying at least one instrument (1720, 1730) as a bitmap 

6 image (3200) of the instrument (1720); 

7 (b) selecting an instrument (3200, 1720); and 
utilizing information (1700-1792) associated with said 
instrument (3200, 1720) for processing. 



1 

2 
3 



(c) 



1 2. 



The method as recited in claim 1, wherein the instrument 



is 



2 represented in accordance with issuer preferences. 



The method as recited in claim 1, including the step of 
presenting an authorization display which presents summary of 
proposed transactions and agreement to complete a transaction 



4 with said instrument. 



The method as recited in claim 3, including a link that faciliates 
changing to another instrument, obtaining information to 
complete the transaction, or reviewing information associated 
with the instrument. 

The method as recited in claim 3, including the step of 
displaying an indicia representative of authorization received. 
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1 6. The method as recited in claim 1, including the step of 

2 imbedding links to a merchant, issuer, advertiser or a 

3 distributor on the display. 
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1 7. The method as recited in claim 1, varies the instruments 

2 enabled for selection based on a provider's practices. 

1 8. The method as recited in claim 1, including the step of 

2 displaying a list of each transaction that an instrument has 

3 been used for on the display. 

1 9. The method as recited in claim 1, including the step of 

2 displaying a menu of options based on the instrument 

3 authorized on the display. 



I 

2 



10. 



The method as recited in claim 1, including the step of varying 
processing based on the instrument selected. 
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1 11. An apparatus for initiating authorization in a computer (100- 

2 138), under the control of software (180-186; 300-380; 400-480) 

3 with an attached display (136-138) and input device (124) 

4 connected to a network for receiving and transmitting network 

5 information ( 1 34- 1 35) , comprising: 

6 (a) the computer under the control of software displaying on the 

7 display at least one instrument as a bitmap image of the 

8 instrument (700-796; 1030, 1040 and 1020); 

9 (b) the input device (124) under the control of the computer (1 10) 

10 under the control of software (700-796) selecting an instrument 

11 (1030); and 

12 (c) the computer under the control of software utilizing information 

1 3 associated with the selected instrument for authorization 

14 processing (600-640). 

1 12. The apparatus as recited in claim 1 1, wherein the instrument is 

2 represented in accordance with issuer preferences. 

1 13. The apparatus as recited in claim 1 1, including said computer 

2 under the control of software providing linkages to other 

3 displays providing additional functions associated with the 

4 process being authorized. 

1 14. The apparatus as recited in claim 11, including said computer 

2 under the control of software presenting a summary of proposed 

3 transactions and agreement to complete a transaction with said 

4 instrument. 
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1 15. The apparatus as recited in claim 1 1, including a link that 

. 2 faciliates changing to another instrument, obtaining information 

3 to complete the transaction, or reviewing information associated 

4 with the instrument. 

1 16. The apparatus as recited in claim 14, including said computer 

2 under the control of software prompting for an authorization 

3 code to authenticate an instrument on the display. 

1 17. The apparatus as recited in claim 14, including said computer 

2 under the control of software displaying an indicia 

3 representative of authorization received on the display. 

1 18. The apparatus as recited in claim 11, including said computer 

2 under the control of software imbedding links to merchants, 

3 issuer, advertiser or distributor on the display. 



WO 97/41540 



PCT/US97/06938 



-72- 



1 19. The apparatus as recited in claim 11, including said computer 

2 under the control of software displaying an indicia 

3 representative of a instrument exceeding an authorization level 

4 on the display. 

1 20. The apparatus as recited in claim 11, including said computer 

2 under the control of software defining a default instrument for 

3 each merchant on the display. 

1 21. The apparatus as recited in claim 1 1 , including said computer 

2 under the control of software displaying a list of each 

3 transaction that an instrument has been used for. 

1 22. The apparatus as recited in claim 11, wherein the instrument is 

2 represented in accordance with an issuer preference on the 

3 display. 

1 23. The method as recited in claim 1 1, wherein payment processing 

2 is based on the instrument selected. 
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